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The invention relates to the technical field of the protection of electronic 
components against illicit manipulation and/or unauthorized access. 

Conventionally, electronic components that are to be protected against 
unauthorized access or against illicit changes of the contents of their memories are altered by 
the activation of fuses or by the storing of passwords. At the time of use, alterations of this 
land are recognized in the procedure of starting up the state machine that is incorporated or 
before use, the valid password is queried and then governs other functions; also, sensors thai 
detect an attempt to manipulate a component are analyzed in the start-up procedure 

The prior art systems explained above are disadvantageous inasmuch as it is 
possxble for manipulation to take place even during the start-up procedure itself; also the 
start-up procedure can be performed as often as desired and may thus itself become the 
subject of an analysis for the purposes of manipulation. 

Taking the disadvantages and shortcomings described above as a point of 
departure and with due allowance for the prior art that has been outlined, it is an object of the 
present mvention to provide a microelectronic circuit arrangement and a method for 
protecting at least one electronic component against illicit manipulation and/or unauthorized 
access m which there are no opportunities for manipulation even during or in connection with 
the start-up procedure. 

This object is achieved by a circuit arrangement having the features detailed in 
churn 1 and by a method having the features detailed in claim 5. Advantageous embodiments 
and useful further embodiments of the present invention are characterized in the dependent 
claims. 

The microelectronic circuit arrangement according to the present invention has 
a plurality of units or parts, there being at least one activating unit or circuit and at least one 
preventing unit or circuit present together in each case. 

The activating unit checks that at least one activation condition is met and in 
the event of at least one activation condition (- illicit manipulation of and/or unauthorized 
access to the electronic component) being met, activates the preventing unit, by means of 
winch the operation of the component can be at least partly deactivated and/or the component 
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can be at least partly destroyed. Advantageously, the preventing unit may be constructed by 
using analog circuit technology or directly digital circuit technology (such as a fuse or 
antifuse) or even by using mixed analog/digital circuit technology. 

In a particularly inventive embodiment, the check that at least one activation 
condition is met, i.e. the detection of the starting condition for self-destruction, may be 
performed by analysis of a flow of data applied from outside or by signals from the internal 
sensor circuitry. 

With regard to the methods of activation implemented in the activating unit 
mere are a plurality of options that can be pu, into practice separately from one another or 'in 
combination with one another, such as 

- the recognition once or more than once of at least one illicit command, 

- the recognition of a multiplicity of different illicit operations, 

- the issuing of at least one specific activating command, 

- the issuing of at least one activating command together with data that is addressed to 
a plurality of components by means of at least one group coding, or to an individually 
coded component, and/or 

- the recognition once or more than once of at least one physical attack on the 
component, by means of sensor circuitry belonging to the component that is intended 
for this purpose; what is meant by "physical attack" in this connection is for example 

- the action of light, 

- damage to a covering layer of the component, or 

- movement outside permitted limiting values for frequency and/or temperature 
and/or for the supply voltage or for a combination of these parameters. 

With regard to the methods of prevention implemented in the preventing unit 
there are a plurality of options that can be put into practice separately from one another or in' 
combination with one another, such as 

- the prevention of at least one internal oscillator from beginning to oscillate 

- the prevention of at least one oscillator for an external clock signal from beginning to 
oscillate, 

- the switching off of at least one high-voltage limiter, in particular by means of 
permanent programming, 

- the prevention of the build-up of at least one high voltage, 

- the reprogramming of the allocation of addresses and/or the allocation of data, 
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- the loading of at least one memory element of the component with illicit values of 
data; 

and/or 

- the switching on of at least one increased current drain in the operating state or the 
quiescent state. 

So, to sum up, the present invention may be implemented by a circuit 
arrangement that may for example be of a mixed analog/digital nature and that, on activation 
of the circuit arrangement by external commends that are recognized or by internal sensors, 
deactivates the electronic component and/or triggers further faults, preferably irreversibly. 

For this purpose, further fuses, which stop the electronic component from 
operating from the very outset or even cause deliberate additional consequential faults, are 
activated in addition to conventional memory-based soft fuses with the help of the 
monitoring and high-voltage circuits that are incorporated in, for example, 
E[lectricdly]E[rasable]P[rogrammable]R[ead]0[nly]M[emory] or flash products. 

The security of the EEPROM or flash products against snooping and against 
analysis is increased in this way; also, the customer is provided with an opportunity of 
deliberately deactivating or irreversibly damaging his product when in field use, by using 
suitable software, where this appears to the customer to be necessary in the event of at least 
one activation condition having been met. 

In a particularly useful manner, the correlation described above, in 
combination with sensor-monitored covering layers on EEPROM or flash products, may be 
used to destroy the latter on their being partly or completely reverse-prepared for analysis 
purposes. 

In addition, the functions described above are useful even for the end- 
customer, especially in S[mart]C[ard]C[ontroller] chips, because the end-customer can then 
de-activate products in use in the field, for example deliberately, when in contact with the 
master system. 

The present invention finally relates to the use of at least one circuit 
arrangement of the kind described above and/or of a method of the kind described above to 
cause the self-destruction of at least one integrated circuit in the event of unauthorized use in 
the field or in the event of an illicit attempt to analyze the integrated circuit by at least partial 
reverse preparation. 

As already discussed above, there are various possible ways in which the 
teaching of the present invention may be embodied and developed. For this, on the one hand 
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reference should be made to the claims dependent on claim 1 and claim 5, and on the other 
these and other aspects of the invention are apparent from and will be elucidated with 
reference to the embodiments described hereinafter. 



In the drawings: 

Fig. 1 is a block diagram giving a diagrammatic view of one embodiment of a 
circuit arrangement according to the present invention that makes use of the method 
according to the present invention. 



Shown in Fig. 1 is an embodiment of a microelectronic circuit arrangement 
100 intended for protecting an electronic component 200 against illicit manipulation and 
unauthorized access. 

Basically, this circuit arrangement 100 operates by employing the following 
method of operation: 

0) the fulfillment of an activation condition is checked for by means of activating 

units Al , A2, A3, A4, A5, where 

(i- 1) activating unit Al is arranged to recognize an illicit command once or more 

than once, 

(i-2) activating unit A2 is arranged to recognize a multiplicity of different illicit 

operations, 

03) activating unit A3 is arranged to issue a given activating command, 

(i-4) activating unit A4 is arranged to issue an activating command togemer with 

data that addresses a plurality of components by means of at least one group coding, or an 
individually coded component, and/or 

(i-5) activating unit A5 is arranged to recognize once or more than once a physical 

attack on the component 200, by means of sensor circuitry belonging to the component 200 
that is intended for this purpose, 

(ii) in the event of illicit manipulation of the component 200 and/or unauthorized 

access to the component 200 being recognized: one or more preventing units VI, V2, V3, 
V4, V5, V6, V7 connected to the activating units Al, A2, A3, A4, A5 are activated, where 
(h. 1) preventing unit VI is arranged to prevent an internal oscillator from beginning 

to oscillate 
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(11.2) preventing unit V2 is arranged to prevent an oscillator for an external clock 
signal from beginning to oscillate, 

(11.3) preventing unit is arranged to switch off a high-voltage limiter, in particular by 
means of permanent programming, 

5 (ii.4) preventing unit V4 is arranged to prevent the build-up of a high voltage, 

(11.5) preventing unit V5 is arranged to reprogram the allocation of addresses 'and/or 
the allocation of data, 

(11.6) preventing unit V6 is arranged to load the memory element 210 of the 
component 200 with illicit values of data, and/or 

10 (ii.7) preventing unit V7 is arranged to switch on an increased current drain in the 

operating state or the quiescent state, and 

(iii) the component 200 is deactivated and/or the component 200 is destroyed by 

means of preventing units VI, V2, V3, V4, V5, V6, V7. 

The embodiment shown in Fig. 1 is based specifically on the principle of de- 
1 5 activating the high voltage: 

If the activation condition is met, i.e. if a start condition for the self- 
destruction is recognized - either by analyzing an externally applied flow of data or by 
signals from the internal sensor circuitry of the component 200 - this recognition and the 
desired effects it is to have are placed in store in coded form in the memory 210 that is used 
for start-up, namely in the form of the self-destruction SZ and the prevention methods VI 
V2, V4, V7. 

In the next step, the start-up procedure, which initiates the appropriate actions 
when the condition for the self-destruction SZ is recognized, is repeated. 

At the next attempt to start up the product, the conditions that arise are 

25 follows: 

f a 3 the conditions are read out, 

[b] prevention method V7 is set: 
increased current drain is switched on 

[c] prevention method V4 is set: 
the generation of high voltage is blocked, 

[d] prevention method V2 is set: 
the external clock signal is ignored, 

[e] prevention method VI is set: 
the internal clock signal is stopped. 
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Consequently, different states can be brought into being between total non- 
functioning of the component 200, restriction of the scope of functions of the component 200 
(progranirning not now possible, say) through to deliberate faults in the environment of the 
integrated circuit (increased quiescent current, say, for battery-operated applications for 
example). 
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100 Microelectronic circuit arrangement 

HO Connection between activating units Ai (i = 1, 2, 3, 4, 5) and preventing units 

Vj (j = 1, 2, 3, 4, 5, 6, 7) 

200 Electronic component 

210 Memory element of component 200 

Al First activating unit or first method of activation 

A2 Second activating unit or second method of activation 

A3 Third activating unit or third method of activation 

A4 Fourth activating unit or fourth method of activation 

A5 Fifth activating unit or fifth method of activation 

sz Self-destruction 

First preventing unit or first method of preventk 
Second preventing unit or second method of preventk 
Third preventing unit or third method of prevent! 
Fourth preventing unit or fourth method of preventk 
Fifth preventing unit or fifth method of prevention 
Sixth preventing unit or sixth method of preventk 
Seventh preventing unit or seventh method of preventic 
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V5 
V6 
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